Cisco 4700M Configuration Manual page 148

Application Protocol Inspection Configuration Quick Start Procedures
Table 3-3
Task and Command Example
1.
2.
3.
4.
5.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
3-24
Layer 7 HTTP Protocol Deep Inspection Quick Start
If you are operating in multiple contexts, observe the CLI prompt to verify
that you are operating in the desired context. If necessary, log directly in to,
or change to, the correct context.
host1/Admin# changeto C1
host1/C1#
The rest of the examples in this table use the Admin context, unless
otherwise specified. For details on creating contexts, see the Cisco 4700
Series Application Control Engine Appliance Virtualization Configuration
Guide.
Enter configuration mode.
host1/Admin# config
Enter configuration commands, one per line. End with CNTL/Z
host1/Admin(config)#
Create a Layer 7 class map that is used for the deep packet inspection of
HTTP traffic. If you do not specify match-all or match-any, traffic must
match all the match criteria to be classified as part of the traffic class.
The CLI displays the class map HTTP application protocol inspection
configuration mode.
host1/Admin(config)# class-map type http inspect match-any
HTTP_INSPECT_L7CLASS
host1/Admin(config-cmap-http-insp)#
Include one or more of the match commands listed in Steps 4 though 13 as
part of the Layer 7 HTTP deep packet inspection class map.
(Optional) Configure the class map to define HTTP application inspection
decisions based on content expressions contained within the HTTP content.
host1/Admin(config-cmap-http-insp)# match content .*newp2psig
(Optional) Configure the class map to define application inspection
decisions in the HTTP content up to the configured maximum content parse
length.
host1/Admin(config-cmap-http-insp)# match content length eq 1000
Chapter 3 Configuring Application Protocol Inspection
OL-16202-01